Analysis

  • max time kernel
    127s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 10:11

General

  • Target

    fa139f0a99bc0583e521505148ceb4f0_JaffaCakes118.pdf

  • Size

    86KB

  • MD5

    fa139f0a99bc0583e521505148ceb4f0

  • SHA1

    5fd3ec5c1f170fa2ff5ec336e85b2d432b840d40

  • SHA256

    a55775f79ae16bd687e5ec92ba0716a484bc3ecaaaf7834669b247772fed0a0a

  • SHA512

    84e41ed1703c7341be3f9b097a465c7206818c6ba058719bed13f3d063930e88865ee540a79329170fbf6a85c93b6b2252acff0ae09abcbcd78068a7694c6fa5

  • SSDEEP

    1536:BUktA805aFVaJxmCttV+hPxXhG2SiKh/2W2Waq3CogxKuWspOR3qu3o:jtA83YhttVEpY2SnQWNCnKBRg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fa139f0a99bc0583e521505148ceb4f0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:872

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9de01feaa26c4aa59f5f0b728c96354e

          SHA1

          0248fc6b518bf43fba76bed991b98b96bc88b875

          SHA256

          ed0d414549fc7e778d15e0f50ead168955c9d25345d7eb89c0f15fa5a8edbf76

          SHA512

          e4f0df35f48b304d9ff2387c4accdcd94edba0a3c7f5f5a66d1e2d64c189d6a3249540fb606f56daa95a69acae7c0e24317f7812a32b3428f9a9eb70e340ed87